cuckoo-droid

CuckooDroid - Analisi automatizzata di malware Android. Contribuito da Check Point Software Technologies LTD. CuckooDroid è un'estensione di Cuckoo Sandbox, il software Open Source per automatizzare l'analisi di file sospetti. CuckooDroid porta a Cuckoo le capacità di esecuzione e analisi delle...

NemoClaw

NVIDIA NemoClaw: Stack di Riferimento per Agenti AI in Sandbox in OpenShell NVIDIA NemoClaw è uno stack di riferimento open source per eseguire agenti AI sempre attivi in modo più sicuro all'interno di sandbox NVIDIA OpenShell. Fornisce onboarding guidato, un blueprint rafforzato, inferenza...

CAPE

CAPEv2 Python3 wurde jetzt veröffentlicht CAPEv2 Mit dem bevorstehenden Ende der Lebensdauer von Python 2 1. Januar 2020 wird CAPEv1 auslaufen. Bitte aktualisieren Sie so bald wie möglich auf die Python 3 Version. CAPE: Malware-Konfiguration und Payload-Extraktion CAPE ist eine Malware-Sandbox. E...

avet

Strumento di Evasione Antivirus AVET non è più in fase di sviluppo a causa di vincoli tecnici e temporali. AVET è uno strumento di evasione antivirus, sviluppato per semplificare la vita ai pentester e per sperimentare tecniche di evasione antivirus, oltre ad altri metodi utilizzati da software...

CVE-2026-79223

A flaw was found in Chromium. An integer overflow vulnerability allows a remote attacker to read sensitive memory within the sandbox. This can be exploited by tricking a user into opening a specially crafted file, potentially leading to the disclosure of confidential information...

CVE-2026-79112

A flaw was found in Skia, a 2D graphics library, within Google Chrome. This out-of-bounds read vulnerability could be exploited by a remote attacker who has already compromised the browser's renderer process. By presenting a specially crafted HTML page, the attacker could read sensitive memory...

qiling

Qiling's use case, blog and related work Qiling is an advanced binary emulation framework, with the following features: Emulate multi-platforms: Windows, macOS, Linux, Android, BSD, UEFI, DOS, MBR. Emulate multi-architectures: 8086, X86, X8664, ARM, ARM64, MIPS, RISC-V, PowerPC. Support multiple...

CAPEv2

CAPE: Estrazione di Configurazione e Payload dei Malware - Documentazione CAPE è una sandbox per malware. Una sandbox viene utilizzata per eseguire file malevoli in un ambiente isolato, monitorando il loro comportamento dinamico e raccogliendo reperti forensi. CAPE deriva da Cuckoo v1, che offre ...

wasm2c-tableflip

wasm2c sandbox escape: il modulo guest esegue un comando shell sull'host Leggi il blog: trustsig.eu/blog wasmrtallocatefuncreftable in wasm2c/wasm-rt-impl-tableops.inc imposta table-size dal numero di elementi dichiarati dal modulo e poi ignora il risultato di calloc. Quando l'allocazione fallisc...

CVE-2026-79240

A flaw was found in ANGLE in Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially lead to arbitrary code execution within the sandbox environment...

When an AI Agent Turned Attacker: What Qualys Sees Across Every Phase of the Hugging Face Kubernetes Intrusion

A phase-by-phase detection mapping of the first publicly documented autonomous agent intrusion against production infrastructure — including the phases where no product in our category sees anything at all. Executive Summary On July 9, 2026, an autonomous AI agent running inside an OpenAI...

CVE-2026-79069

A flaw was found in Google Chrome's Tint component on macOS. A remote attacker could exploit a memory corruption vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox...

CVE-2026-79054

A flaw was found in Chromecast within Google Chrome. This use-after-free vulnerability allows a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page,...

CVE-2026-79052

A flaw was found in Aura, a component within Google Chrome. This vulnerability, known as a 'use-after-free,' occurs when a program attempts to use memory after it has been freed, which can lead to unpredictable behavior. A remote attacker could exploit this by tricking a user into visiting a...

CVE-2026-79057

A flaw was found in Google Chrome on Android. A race condition in the 'Start' component could allow a local attacker to potentially execute arbitrary code outside of the application's security sandbox. This exploitation requires leveraging social engineering and a co-installed application...

CVE-2026-79008

A flaw was found in the Chromium GPU component. This improper input validation vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially execute arbitrary code outside of the sandbox. This can occur when a user is enticed to open a specially crafted...

CVE-2026-79027

A flaw was found in WebRTC. A remote attacker could exploit a use-after-free vulnerability by sending crafted network traffic. This could allow the attacker to execute arbitrary code within the sandbox environment, leading to potential system compromise...

CVE-2026-78999

A flaw was found in Google Chrome's Navigation component. Improper privilege management could allow a remote attacker, who has already compromised the renderer process and leveraged social engineering, to execute arbitrary code outside of the sandbox. This exploitation occurs via a specially...

CVE-2026-78990

A flaw was found in Compositing in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code within the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-78985

A flaw was found in the FileSystem component of Google Chrome. This vulnerability, caused by incorrect reference resolution, could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox. This exploitation would require social engineering to trick a user into...